Siemens SICAM Q200 Devices
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to remote code execution. Siemens has released an update for POWER METER SICAM Q200 family and recommends to update to the latest version.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-31238US | medium4.8 | — | ||
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA… | ||||
| CVE-2023-30901US | high8.8 | — | ||
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA… | ||||
| CVE-2022-43546US | high8.8 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),… | ||||
| CVE-2022-43545US | high8.8 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),… | ||||
| CVE-2022-43439US | high8.8 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) (All versions < V2.50), POWER… | ||||
| CVE-2022-43398US | high8.8 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices - CSAF Versionself
- SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices - HTML Versionself
- SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices - PDF Versionself
- SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices - TXT Versionself
- ICS Advisory ICSA-23-166-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-166-03 - Web Versionself
- Recommended Practicesexternal
Behebungen (12)
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- BehobenPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - BehobenPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - BehobenPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - BehobenPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - BehobenPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - BehobenPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan